RLS Help - Data rows not filtering based on role membership

[BishopKeltie]

Hi,

I have built a report comprising of a custom kpi bar and approx 10 chart visuals. Each visual has its own data source table but they are linked to the kpi bar's table with a common column (lets call the the primary). This column holds all the user identifiers which is a stripped down version of the User principle names. 

What we want to achieve is that that standard users should only see data/rows relevent to them. this should be the report's default posistion.

We also have a poweruser/manages group of users that should be able to see all data rows and thus all user's data. They can utilise the filters to filter down to what they need.

I have configure the roles as below applying the main DAX expression to the primary table.

example 'True' match = username in [USERNAME] table column = XYZ, UPN = XYZ@Contoso.com

In desktop, when i test by viewing as this role is see the expected result. All visuals on the report are empty.

When this report is published to the cloud service and the role memberships/security are assigned. All users can see all rows, not just theirs. Further more when i test with a test user i know has no linked row at all, it too can see all data/rows.

Im also aware of the dataset owner testing quirk/problem. For this reason we design and publish reports using a special BI developer account. This way when we/I test as myself the same restrictions based on role membership should happen to me.

Again, i should not be seeing any data as above, but i the RLS is showing me everything.

Can anyon assist or give pointers as ive had similar setups work on other reports (although less complicated).

The only other cause i can think of is maybe it's related to where the report is published. In this case it is published to a team/workspace where all staff are members (not owners). This gives access the the actual report without having to share indiviually to users or groups.

By doing this, would it grant access to all data rows? I didnt think it would.

[BishopKeltie · Accepted solution]

Hi All,

Shortly after posting i found the fix. 

I was indeed related to the workspace privacy settings in that all members were able to edit.

As per link below, this gives members access to the whole dataset regardless of RLS. A change to view only fixed my problem.

Ref links:

• Manage your workspace in Power BI and Microsoft 365 - Power BI | Microsoft Docs
• Organize work in the new workspaces in Power BI - Power BI | Microsoft Docs